@sourcey/catalog-verifier 1.1.7 → 1.1.8
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/SBOM.cdx.json
CHANGED
|
@@ -99,25 +99,25 @@
|
|
|
99
99
|
},
|
|
100
100
|
{
|
|
101
101
|
"type": "library",
|
|
102
|
-
"bom-ref": "pkg:npm/provenry@0.2.
|
|
102
|
+
"bom-ref": "pkg:npm/provenry@0.2.1",
|
|
103
103
|
"name": "provenry",
|
|
104
104
|
"licenses": [
|
|
105
105
|
{
|
|
106
106
|
"expression": "MIT"
|
|
107
107
|
}
|
|
108
108
|
],
|
|
109
|
-
"version": "0.2.
|
|
110
|
-
"purl": "pkg:npm/provenry@0.2.
|
|
109
|
+
"version": "0.2.1",
|
|
110
|
+
"purl": "pkg:npm/provenry@0.2.1",
|
|
111
111
|
"hashes": [
|
|
112
112
|
{
|
|
113
113
|
"alg": "SHA-512",
|
|
114
|
-
"content": "
|
|
114
|
+
"content": "deaa4dc54a50f02c6c683f18ad88fbcfa2defd819d3357e9c78815c16241381865628b04004c46608bd7341a5127a8c453a322b008fbd0b34ae4b1082411b2a4"
|
|
115
115
|
}
|
|
116
116
|
],
|
|
117
117
|
"externalReferences": [
|
|
118
118
|
{
|
|
119
119
|
"type": "distribution",
|
|
120
|
-
"url": "https://registry.npmjs.org/provenry/-/provenry-0.2.
|
|
120
|
+
"url": "https://registry.npmjs.org/provenry/-/provenry-0.2.1.tgz"
|
|
121
121
|
}
|
|
122
122
|
]
|
|
123
123
|
},
|
|
@@ -222,7 +222,7 @@
|
|
|
222
222
|
{
|
|
223
223
|
"ref": "urn:sourcey:code-distribution:catalog-verifier",
|
|
224
224
|
"dependsOn": [
|
|
225
|
-
"pkg:npm/provenry@0.2.
|
|
225
|
+
"pkg:npm/provenry@0.2.1",
|
|
226
226
|
"pkg:npm/tldts@7.4.16",
|
|
227
227
|
"pkg:npm/yaml@2.9.1",
|
|
228
228
|
"pkg:npm/zod@4.6.5"
|
|
@@ -239,7 +239,7 @@
|
|
|
239
239
|
]
|
|
240
240
|
},
|
|
241
241
|
{
|
|
242
|
-
"ref": "pkg:npm/provenry@0.2.
|
|
242
|
+
"ref": "pkg:npm/provenry@0.2.1",
|
|
243
243
|
"dependsOn": [
|
|
244
244
|
"pkg:npm/parse5@8.0.1",
|
|
245
245
|
"pkg:npm/zod@4.6.5"
|
package/SOURCEY-CLOSURE.json
CHANGED
|
@@ -1860,11 +1860,11 @@
|
|
|
1860
1860
|
},
|
|
1861
1861
|
{
|
|
1862
1862
|
"path": "dist/modules/publication-instance/src/index.d.ts",
|
|
1863
|
-
"sha256": "sha256:
|
|
1863
|
+
"sha256": "sha256:23987dedc02a9a7d940ed0ad3d80ea10833fc2ebe3af7f26affecb937a96c6e0"
|
|
1864
1864
|
},
|
|
1865
1865
|
{
|
|
1866
1866
|
"path": "dist/modules/publication-instance/src/index.d.ts.map",
|
|
1867
|
-
"sha256": "sha256:
|
|
1867
|
+
"sha256": "sha256:f10ea7b676fc06914b593aa9993a711e49d62be603e9fec389e61881d114c39f"
|
|
1868
1868
|
},
|
|
1869
1869
|
{
|
|
1870
1870
|
"path": "dist/modules/publication-instance/src/index.js",
|
|
@@ -2211,5 +2211,5 @@
|
|
|
2211
2211
|
"sha256": "sha256:cec1e15c14a9958a061bcea4ac0bad33e10242994c25556c1ec952b52ef2735e"
|
|
2212
2212
|
}
|
|
2213
2213
|
],
|
|
2214
|
-
"closure_digest": "sha256:
|
|
2214
|
+
"closure_digest": "sha256:77b7a630c0a0d047ec5f7b1fcf0da14178664160e9a34a75e9a908cf20a2feca"
|
|
2215
2215
|
}
|
package/THIRD_PARTY_NOTICES.json
CHANGED
|
@@ -37,10 +37,10 @@
|
|
|
37
37
|
},
|
|
38
38
|
{
|
|
39
39
|
"name": "provenry",
|
|
40
|
-
"version": "0.2.
|
|
40
|
+
"version": "0.2.1",
|
|
41
41
|
"license": "MIT",
|
|
42
|
-
"resolved": "https://registry.npmjs.org/provenry/-/provenry-0.2.
|
|
43
|
-
"integrity": "sha512
|
|
42
|
+
"resolved": "https://registry.npmjs.org/provenry/-/provenry-0.2.1.tgz",
|
|
43
|
+
"integrity": "sha512-3qpNxUpQ8CxsaD8YrYj7z6Le/YGdM1fpx4gVwWJBOBhlYosEAExGYIvXNBpRJ6jEU6MisAj70LNK5LEIJBGypA==",
|
|
44
44
|
"lock_path": "node_modules/provenry",
|
|
45
45
|
"license_files": [
|
|
46
46
|
{
|
|
@@ -346,6 +346,43 @@ export declare const sourceyReleaseEnvelope: Readonly<{
|
|
|
346
346
|
};
|
|
347
347
|
readonly files: ReadonlyMap<string, Buffer>;
|
|
348
348
|
};
|
|
349
|
+
verifyBundle(bundleBytes: Buffer): {
|
|
350
|
+
bundle_contract: string;
|
|
351
|
+
admitted_input_digests: string[];
|
|
352
|
+
verifier_digest: string;
|
|
353
|
+
object_manifest_digest: string;
|
|
354
|
+
release: {
|
|
355
|
+
descriptor_contract: string;
|
|
356
|
+
snapshot_core: {
|
|
357
|
+
snapshot_contract: string;
|
|
358
|
+
release_sequence: number;
|
|
359
|
+
compiler_version: string;
|
|
360
|
+
artifact_contract: string;
|
|
361
|
+
input_set_digest: string;
|
|
362
|
+
artifact_digest: string;
|
|
363
|
+
resource_digests: Record<string, string>;
|
|
364
|
+
root_set_digest: string;
|
|
365
|
+
signer_registry_digest: string;
|
|
366
|
+
trust_transition_digest: string | null;
|
|
367
|
+
policy_as_of: string;
|
|
368
|
+
};
|
|
369
|
+
snapshot_id: string;
|
|
370
|
+
release_core: {
|
|
371
|
+
release_contract: string;
|
|
372
|
+
release_sequence: number;
|
|
373
|
+
snapshot_id: string;
|
|
374
|
+
parent_release_id: string | null;
|
|
375
|
+
diff_digest: string;
|
|
376
|
+
};
|
|
377
|
+
release_id: string;
|
|
378
|
+
};
|
|
379
|
+
resource_digests: Record<string, string>;
|
|
380
|
+
files: Record<string, {
|
|
381
|
+
sha256: string;
|
|
382
|
+
bytes: number;
|
|
383
|
+
}>;
|
|
384
|
+
bundle_digest: string;
|
|
385
|
+
};
|
|
349
386
|
verify(releaseFiles: ReadonlyMap<string, Buffer>): Readonly<{
|
|
350
387
|
bundle: {
|
|
351
388
|
bundle_contract: string;
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../modules/publication-instance/src/index.ts"],"names":[],"mappings":"AAIA,OAAO,EACL,KAAK,sBAAsB,EAG5B,MAAM,yCAAyC,CAAC;AAGjD,yEAAyE;AACzE,eAAO,MAAM,wBAAwB,eAAe,CAAC;AAErD;;;;GAIG;AACH,eAAO,MAAM,sBAAsB
|
|
1
|
+
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../modules/publication-instance/src/index.ts"],"names":[],"mappings":"AAIA,OAAO,EACL,KAAK,sBAAsB,EAG5B,MAAM,yCAAyC,CAAC;AAGjD,yEAAyE;AACzE,eAAO,MAAM,wBAAwB,eAAe,CAAC;AAErD;;;;GAIG;AACH,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAIjC,CAAC;AAEH,KAAK,uBAAuB,GAAG,UAAU,CAAC,OAAO,sBAAsB,CAAC,MAAM,CAAC,CAAC;AAEhF,uFAAuF;AACvF,MAAM,MAAM,sBAAsB,GAC9B;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,uBAAuB,CAAA;CAAE,GACrE;IACE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,QAAQ,CAAC,QAAQ,EAAE,uBAAuB,CAAC;IAC3C,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB,CAAC;AAEN,wEAAwE;AACxE,wBAAsB,0BAA0B,CAC9C,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,sBAAsB,CAAC,CAIjC;AASD,wBAAgB,sBAAsB,CAAC,YAAY,EAAE,MAAM,GAAG,sBAAsB,CAInF"}
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@sourcey/catalog-verifier",
|
|
3
|
-
"version": "1.1.
|
|
3
|
+
"version": "1.1.8",
|
|
4
4
|
"description": "Validate Sourcey data contributions and verify immutable Sourcey Catalog releases.",
|
|
5
5
|
"keywords": [
|
|
6
6
|
"sourcey",
|
|
@@ -52,7 +52,7 @@
|
|
|
52
52
|
"test": "node --test test/*.test.mjs"
|
|
53
53
|
},
|
|
54
54
|
"dependencies": {
|
|
55
|
-
"provenry": "0.2.
|
|
55
|
+
"provenry": "0.2.1",
|
|
56
56
|
"tldts": "7.4.16",
|
|
57
57
|
"yaml": "2.9.1",
|
|
58
58
|
"zod": "4.6.5"
|